EUVD-2025-179990

Malicious code in bootstrap-semantic-release-pulsar-koa npm...

EUVD-2025-180302

Malicious code in astro-ignite-scripts-pulsar npm...

EUVD-2025-177571

Malicious code in node-config-pulsar-buffer-luna npm...

EUVD-2025-175641

Malicious code in wasat-pulsar-exobiology-link npm...

EUVD-2025-177280

Malicious code in pegasus-pulsar-plutology-astrochemistry npm...

EUVD-2025-176900

Malicious code in pulsar-puppeteer-dagda-cosmology npm...

EUVD-2025-178088

Malicious code in link-sadr-helios-pulsar npm...

EUVD-2025-176163

Malicious code in subduction-pulsar-yaml-janus npm...

EUVD-2025-179781

Malicious code in chalk-pulsar-native-xerxes npm...

Malicious code in xenon-graviton-gravity-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5cd3c1a720ee5addd563d7161ef6e801e83409e8f804fd7355ef0ddb38c2fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177311

Malicious code in parsec-pulsar-areology-airbnb npm...

EUVD-2025-176902

Malicious code in pulsar-orogeny-heliophysics-morgan npm...

EUVD-2025-177369

Malicious code in paleoclimatology-node-sass-asteroid-pulsar npm...

EUVD-2025-180372

Malicious code in aquarius-relay-pulsar-eslint-config npm...

EUVD-2025-179512

Malicious code in cressida-prettier-plugin-markdown-pulsar-stream npm...

Malicious code in neptune-slidev-pulsar-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1799733a7d342bee25bf57ffb1e4dd7b9fc468ef2728d5aae7943edc1a9bb58c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175504

Malicious code in xenon-graviton-gravity-pulsar npm...

EUVD-2025-177905

Malicious code in membrane-genomics-passport-pulsar npm...

EUVD-2025-180108

Malicious code in bellatrix-pulsar-bionics-cryovolcano npm...

Malicious code in chai-javascript-pulsar-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e42433738cc5a2accb6a2b35a72082ee4ac69aa8f58a357c9658e5819a94fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...